IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

QRadar Log Source Management - Uninstall Previewing

  • 1.  QRadar Log Source Management - Uninstall Previewing

    Posted Thu July 22, 2021 06:14 PM

    I cant continue to install new extension because the QRadar Log Source Managemente extension is in "Unsintalling Previewing" status.



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: QRadar Log Source Management - Uninstall Previewing

    Posted Thu July 22, 2021 06:58 PM

    Would you be able to provide the text from the error or include additional information? Are you updating the Log Source Management app? Can you provide the steps you used? Are you using QRadar community edition?



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: QRadar Log Source Management - Uninstall Previewing

    Posted Thu July 22, 2021 08:20 PM
    1. I Installed IBM QRadar, 7.4.3 (Build 20210517144015), Tuning template is Enterprise.
    2. When I try to manage the Event Log Sources, QRadar show me a message box with "A New Application Required" and redirect me to a page to Download "QRadar Log Source Management - QRadar v7.3.1/7.4.0 Compatibility ONLY", I downloaded and try to install it with QRadar Extension but tell me "Install Failed". If I want to install or delete this app QRadar show me "The current state of the application does not allow the requested action." So I cant continue.
    3. There is another app similar "QRadar Log Source Management" but is in "Uninstall Previewing" status... so I cant do anything.


    Can I do some manually to clean it or resintall it?


    Thanks




    #QRadar
    #Support
    #SupportMigration


  • 4.  RE: QRadar Log Source Management - Uninstall Previewing

    Posted Thu July 22, 2021 08:59 PM



    #QRadar
    #Support
    #SupportMigration


  • 5.  RE: QRadar Log Source Management - Uninstall Previewing

    Posted Fri July 23, 2021 12:04 PM

    Log into the console as admin user. Click Admin tab > extension management.

    Look at the state of the APP. If its in a failed or unstalled state try to install it.

    IF it continues to fail .

    Log in CLI access to the Console as root user. Follow the instructions on this article and see what is the status of the Log Source manager app. Also get teh ID number.

    https://www.ibm.com/support/pages/qradar-about-qappmanager-support-utility



    #QRadar
    #Support
    #SupportMigration


Related Content